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This listing of claims will replace all prior versions, and listings, of claims 
in the application: 

Listing of Claims 

Claim 1 (Currently amended): A computer system capable of accessing and 
controlling use of a watermarked software object, the system comprising: 
a processor; and 

a memory having computer executable instructions stored therein; and 
wherein the processor, in response to the stored executable instructions: 
reads a specific one of a plurality of identical watermarks embedded in the 
software object with different watermark keys so as to yield an actual watermark 
value, wherein the specific one watermark is defined by a predefined value of a 
watermark key previously provided to and stored within the system; and 

sets usage rights applicable to the object in response to the actual watermark 
value so as to control further use of the object by the computer system. 

Claim 2 (Original): The system in claim 1 wherein the object is either a 
passive or active object, the passive object comprising content and the active 
object comprising executable code. 

Claim 3 (Original): The system in claim 2 wherein, the processor, in 
response to the stored instructions and as part of the usage rights setting operation, 
supplies the usage rights to an operating system executing in the computer system 
in order to set a protection state applicable to the object. 

Claim 4 (Original): The system in claim 3 wherein the watermark key 
expires after a predefined period of time elapses and the processor, in response to 
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the stored instructions, obtains a new watermark key for subsequent use in lieu of 
the expired watermark key, wherein the new watermark key defines a different one 
of the plurality of watermarks embedded in the object. 

Claim 5 (Original): The system in claim 3 wherein the value of the 
watermark key defines a pointer to a location in the object at which the specific 
one watermark appears. 

Claim 6 (Original): The system in claim 5 wherein the location is a starting 
location. 

Claim 7 (Original): The system in claim 5 wherein all of the plurality of 
said watermarks embedded in the object contain an identical watermark value. 

Claim 8 (Original): The system in claim 7 wherein the identical watermark 
value contains a concatenation of a product identification value associated with the 
object and an identification value associated with the object provider. 

Claim 9 (Original): The system in claim 3 wherein the processor, in 
response to the stored instructions: 

reads a license for the object, the license specifying an expected value of a 
first parameter and the usage rights of the object; 

compares the expected value of the first parameter against an actual value 
of the first parameter contained in the specific one watermark; 

if the actual and expected values for first parameter do not identically match 
each other, prevents the object from being used. 

Claim 10 (Original): The system in claim 9 wherein the processor, in 
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response to the stored instructions: 

obtains an expected value of a second parameter communicated with the 
specific one object; 

extracts, from the specific one watermark detected in the object, the actual 
value of the first parameter and an actual value of the second parameter; 

compares the expected values of the first and second parameters against the 
actual values of the first and second parameters, respectively; and 

if the actual values of the first and second parameters identically and 
respectively match the expected values of the first and second parameters, permits 
the object to be used in accordance with the usage rights specified in the license. 

Claim 11 (Original): The system in claim 10 wherein the processor, in 
response to the stored instructions, verifies that the license is signed by the object 
provider specified through the actual value of the second parameter found in the 
specific one watermark. 

Claim 12 (Original): The system in claim 10 wherein the first and second 
parameters comprise a product identification (PID) value and- a vendor 
identification (VID) value, respectively. 

Claim 13 (Currently amended): The system in claim 9 wherein the license 
comprises a decryption key. 

Claim 14 (Original): The system in claim 13 wherein the processor, in 
response to the stored instructions, generates a request for the license, wherein the 
request specifies the object. 

Claim 15 (Original): The system in claim 14 wherein the request for the 
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license further comprises a public key value associated with the computer system; 
and the license further comprises the expected value of the first parameter and the 
usage rights. 

Claim 16 (Original): The system in claim 15 wherein the license further 
comprises a signature generated through use of a public key associated with a 
provider of the object, the signature being a function of the expected value of the 
first parameter and the usage rights. 

Claim 17 (Currently amended): The system in claim 16 wherein the 
processor, in response to the stored instructions: 
performs a license verifying operation by: 

verifying, using a predefined cryptographic parameter stored in the 
computer system, the public key associated with the object provider so as to 
define a certified public key of the object provider; and 

verifying, using the certified public key of the object provider, the 
signature in the license as generated by the object provider so as to define a 
verified signature; and 

performs an extraction operation by extracting, from the verified 
signature, the expected value of the first parameter, [the]an encryption key 
and the usage rights. 

Claim 18 (Original): The system in claim 17 wherein the value of the 
watermark key defines a pointer to a location in the object at which the specific 
one watermark appears. 

Claim 19 (Original): The system in claim 18 wherein the location is a 
starting location. 
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Claim 20 (Original): The system in claim 18 wherein all of the plurality of 
said watermarks embedded in the object contain an identical watermark value. 

Claim 21 (Original): The system in claim 20 wherein the identical 
watermark value contains a concatenation of a product identification value 
associated with the object, as the first parameter, and a vendor identification value 
associated with the object provider. 

Claim 22 (Original): The system in claim 17 wherein the processor, in 
response to the stored instructions: 

decrypts the object, as downloaded by the object provider to the computer 
system, using the decryption key specified in the license so as to yield a decrypted 
version of the object; and 

reads the value of the specific one watermark in the decrypted version of 
the object. 

Claim 23 (Original): The system in claim 22 wherein the decryption key is 
a symmetric encryption key which has been previously used, by the object 
provider, to encrypt the object in order to produce the encrypted version of the 
object. 

Claim 24 (Original): The system in claim 22 wherein the watermark key 
expires after a predefined period of time elapses and the processor, in response to 
the stored instructions, obtains a new watermark key for subsequent use in lieu of 
the expired watermark key, wherein the new watermark key defines a different one 
of the plurality of watermarks embedded in the object. 



Iee@hayes puc 509-324-92w 



8 



MSU 154651.1 G:\MSI'l\U91USWSl-1191US.M01.tloc 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 




Claim 25 (Original): The system in claim 22 further comprising an enforcer 
having: 

an encrypted store for storing the encrypted version of the object produced 
by the object provider; 

a decrypter for decrypting, using the decryption key, the encrypted version 
of the object stored in the encrypted store so as to yield a decrypted version of the 
object; 

an unencrypted buffer for storing the decrypted object; 

a watermark detector for detecting the presence of the specific one 
watermark embedded in the decrypted version of the object and for obtaining 
therefrom the actual value of the first parameter; and 

a license verifier which: 

performs the license verifying operation and, once the signature in the 
license is verified, the extraction operation so as to yield the decryption key, the 
expected value of the first parameter and the usage rights; 

compares the expected value against the actual value of the first parameter; 

and 

if the actual and expected values for first parameter do not identically match 
each other, then sets, in conjunction with the operating system, the protection state 
to prevent further use of the decrypted version of the object while the decrypted 
version remains in the unencrypted buffer. 

Claim 26 (Original): The system in claim 25 wherein the processor, in 
response to the stored instructions: 

obtains an expected value of a second parameter communicated with the 
specific one object; 

extracts, from the specific one watermark detected in the object, the actual 
value of the first parameter and an actual value of the second parameter; 
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compares the expected values of the first and second parameters against the 
actual values of the first and second parameters, respectively; and 

if the actual values of the first and second parameters identically and 
respectively match the expected values of the first and second parameter sets, in 
conjunction with the operating system and consistent with the usage rights, the 
protection state to govern use of the decrypted version of the object while the 
decrypted version remains in the unencrypted buffer. 

Claim 27 (Original): The system in claim 26 wherein the first and second 
parameters comprise a product identification (PID) value and a vendor 
identification (VID) value, respectively. 

Claim 28 (Original): The system in claim 25 wherein if the license exists 
for the object, the processor, in response to the stored instructions and through the 
license verifier, sets the usage rights to appropriate values so as to inhibit further 
use of the decrypted object if the watermark detector fails to detect the specific one 
watermark in the decrypted version of the object. 

Claim 29 (Original): The system in claim 28 wherein either all or a portion 
of the enforcer is located either in the operating system or in a media card 
associated with the computer system. 

Claim 30 (Original): The system in claim 28 wherein the operating system 
comprises a digital rights management system having a license database which 
stores the license, and, subsequently, in response to a request issued by the 
computer system to access the object, provides the license to the enforcer. 

Claim 31 (Original): The system in claim 30 wherein the request for the 
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license further comprises an authorization for payment of a predefined fee in 
exchange for the license. 

Claim 32 (Original): The system in claim 28 wherein the value of the 
watermark key defines a pointer to a location in the object at which the specific 
one watermark appears. 

Claim 33 (Original): The system in claim 32 wherein the location is a 
starting location. 

Claim 34 (Original): The system in claim 32 wherein all of the plurality of 
said watermarks embedded in the object contain an identical watermark value. 

Claim 35 (Original): The system in claim 34 wherein the identical 
watermark value contains a concatenation of a product identification value 
associated with the object, as the first parameter, and a vendor identification value 
associated with the object provider. 

Claim 36 (Original): The system in claim 28 wherein the decryption key is 
a symmetric encryption key which has been previously used, by the object 
provider, to encrypt the object in order to produce the encrypted version of the 
object. 

Claim 37 (Original): The system in claim 28 wherein the watermark key 
expires after a predefined period of time elapses and the processor, in response to 
the stored instructions, obtains a new watermark key for subsequent use in lieu of 
the expired watermark key, wherein the new watermark key defines a different one 
of the plurality of watermarks embedded in the object. 
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Claim 38 (Original): The system in claim 3 wherein the processor, in 
response to the stored instructions, downloads the object, via a network 
connection, from a first server. 

Claim 39 (Original): The system in claim 38 wherein the watermark key 
expires after a predefined period of time elapses and the processor, in response to 
the stored instructions, obtains a new watermark key for subsequent use in lieu of 
the expired watermark key, wherein the new watermark key defines a different one 
of the plurality of watermarks embedded in the object. 

Claim 40 (Original): The system in claim 38 wherein the value of the 
watermark key defines a pointer to a location in the object at which the specific 
one watermark appears. 

Claim 41 (Original): The system in claim 40 wherein the location is a 
starting location. 

Claim 42 (Original): The system in claim 40 wherein all of the plurality of 
said watermarks embedded in the object contain an identical watermark value. 

Claim- 43 (Original): The system in claim 42 wherein the identical 
watermark value contains a concatenation of a product identification value 
associated with the object and a vendor identification value associated with the 
object provider. 

Claim 44 (Original): The system in claim 38 wherein the processor, in 
response to the stored instructions: 
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reads a license for the object, the license specifying an expected value of a 
first parameter and the usage rights of the object; 

compares the expected value of the first parameter against an actual value 
of the first parameter contained in the specific one watermark; 

if the actual and expected values for first parameter do not identically match 
each other, prevents the object from being used. 

Claim 45 (Original): The system in claim 44 wherein the processor, in 
response to the stored instructions: 

obtains an expected value of a second parameter communicated with the 
specific one object; 

extracts, from the specific one watermark detected in the object, the actual 
value of the first parameter and an actual value of the second parameter; 

compares the expected values of the first and second parameters against the 
actual values of the first and second parameters, respectively; and 

if the actual values of the first and second parameters identically and 
respectively match the expected values of the first and second parameters, permits 
the object to be used in accordance with the usage rights specified in the license. 

Claim 46 (Original): The system in claim 45 wherein the processor, in 
response to the stored instructions, verifies that the license is signed by the object 
provider specified through the actual value of the second parameter found in the 
specific one watermark. 

Claim 47 (Original): The system in claim 45 wherein the first and second 
parameters comprise a product identification (PID) value and a vendor 
identification (VID) value, respectively. 
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Claim 48 (Original): The system in claim 44 wherein the license comprises 
a decryption key. 

Claim 49 (Original): The system in claim 40 wherein the processor, in 
response to the stored instructions, obtains the license from a second server and via 
a network connection existing between the computer system and the second server. 

Claim 50 (Original): The system in claim 49 wherein the first and second 
servers are the same. 

Claim 51 (Original): The system in claim 49 wherein the request for the 
license further comprises a public key value associated with the computer system; 
and the license further comprises the expected value of the first parameter and the 
usage fights. 

Claim 52 (Original): The system in claim 51 wherein the processor, in 
response to the stored instructions, generates a request, via a network connection, 
to the second server for the license, wherein the request specifies the object. 

Claim 53 (Original): The system in claim 52 wherein the license further 
comprises a signature generated through use of a public key associated with a 
provider of the object, the signature being a function of the expected value of the 
first parameter and the usage rights. 

Claim 54 (Original): The system in claim 53 wherein the processor, in 
response to the stored instructions: 

performs a license verifying operation by: 

verifying, using a predefined cryptographic parameter stored in the 
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computer system, the public key associated with the object provider so as to 
define a certified public key of the object provider; and 

verifying, using the certified public key of the object provider, the 
signature in the license as generated by the object provider so as to define a 
verified signature; and 

performs an extraction operation by extracting, from the verified signature, 
the expected value of the first parameter, the encryption key and the usage rights. 

Claim 55 (Original): The system in claim 54 wherein the value of the 
watermark key defines a pointer to location in the object at which the specific one 
watermark appears. 

Claim 56 (Original): The system in claim 55 wherein the location is a 
starting location. 

Claim 57 (Original): The system in claim 55 wherein all of the plurality of 
said watermarks embedded in the object contain an identical watermark value. 

Claim 58 (Original): The system in claim 57 wherein the identical 
watermark value contains a concatenation of a product identification value 
associated with the object, as the first parameter, and a vendor identification value 
associated with the object provider. 

Claim 59 (Original): The system in claim 54 wherein the processor, in 
response to the stored instructions: 

decrypts the object, as downloaded by the object provider to the computer 
system, using the decryption key specified in the license so as to yield a decrypted 
version of the object; and 
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reads the value of the specific one watermark in the decrypted version of 
the object. 

Claim 60 (Original): The system in claim 59 wherein the decryption key is 
a symmetric encryption key which has been previously used, by the object 
provider, to encrypt the object in order to produce the encrypted version of the 
object. 

Claim 61 (Original): The system in claim 59 wherein the watermark key 
expires after a predefined period of time elapses and the processor, in response to 
the stored instructions, obtains a new watermark key for subsequent use in lieu of 
the expired watermark key, wherein the new watermark key defines a different one 
of the plurality of watermarks embedded in the object. 

Claim 62 (Original): The system in claim 59 further comprising an enforcer 
having: 

an encrypted store for storing the encrypted version of the object produced 
by the object provider; 

a decrypter for decrypting, using the decryption key, the encrypted version 
of the object stored in the encrypted store so as to yield a decrypted version of the 
object; 

an unencrypted buffer for storing the decrypted object; 

a watermark detector for detecting the presence of the specific one 
watermark embedded in the decrypted version of the object and for obtaining 
therefrom the actual value of the first parameter; and 

a license verifier which: 

performs the license verifying operation and, once the signature in 

the license is verified, the extraction operation so as to yield the decryption 
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key, the expected value of the first parameter and the usage rights; 

compares the expected value against the actual value of the first 
watermark; and 

if the actual and expected values for first parameter do not 
identically match each other, then sets, in conjunction with the operating 
system, the protection state to prevent further use of the decrypted version 
of the object while the decrypted version remains in the unencrypted buffer. 

Claim 63 (Original): The system in claim 62 wherein the processor, in 
response to the stored instructions: 

obtains an expected value of a second parameter communicated with the 
specific one object; 

extracts, from the specific one watermark detected in the object, the actual 
value of the first parameter and an actual value of the second parameter; 

compares the expected values of the first and second parameters against the 
actual values of the first and second parameters, respectively; and 

if the actual value of the first and second parameters identically and 
respectively match the expected values of the first and second parameter sets, in 
conjunction with the operating system and consistent with the usage rights, the 
protection state to govern use of the decrypted version of the object while the 
decrypted version remains in the unencrypted buffer. 

Claim 64 (Original): The system in claim 63 wherein the first and second 
parameters comprise a product identification (PID) value and a vendor 
identification (VID) value, respectively. 

Claim 65 (Original): The system in claim 62 wherein if the license exists 
for the object, the processor, in response to the stored instructions and through the 
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license verifier, sets the usage rights to appropriate values so as to inhibit further 
use of the decrypted object if the watermark detector fails to detect the specific one 
watermark in the decrypted version of the object. 

Claim 66 (Original): The system in claim 65 wherein either all or a portion 
of the enforcer is located either in the operating system or in a media card 
associated with computer system. 

Claim 67 (Original): The system in claim 65 wherein the operating system 
comprises a digital rights management system having a license database which 
stores the license, and, subsequently, in response to a request issued by the 
computer system to access the object, provides the license to the enforcer. 

Claim 68 (Original): The system in claim 67 wherein the request for the 
license further comprises an authorization for payment of a predefined fee in 
exchange for the license. 

Claim 69 (Original): The system in claim 65 wherein the value of the 
watermark key defines a pointer to a location in the object at which the specific 
one watermark appears. 

Claim 70 (Original): The system in claim 69 wherein the location is a 
starting location. 

Claim 71 (Original): The system in claim 69 wherein all of the plurality of 
said watermarks embedded in the object contain an identical watermark value. 

Claim 72 (Original): The system in claim 71 wherein the identical 
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watermark value contains a concatenation of a product identifier associated with 
the object and an identifier associated with the object provider. 

Claim 73 (Original): The system in claim 62 wherein the first and second 
servers are the same. 

- Claim 74 (Original): The system in claim 62 wherein the decryption key is 
a symmetric encryption key which has been previously used, by the object 
provider, to encrypt the object in order to produce the encrypted version of the 
object. 

Claim 75 (Original): The system in claim 62 wherein the watermark key 
expires after a predefined period of time elapses and the processor, in response to 
the stored instructions, obtains a new watermark key for subsequent use in lieu of 
the expired watermark key, wherein the new watermark key defines a different one 
of the plurality of watermarks embedded in the object. 

Claim 76 (Original): The system in claim 62 wherein the processor, in 
response to the stored instructions, obtains the new watermark key, via a network 
connection, from a third server. 

Claim 77 (Original): The system in claim 62 wherein the third server is 
either the same as the first or second server, or is associated with a third party 
watermarking authority. 

Claim 78 (Original): The system in claim 77 wherein the first and second 
servers are the same. 
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Claim 79 (Currently amended): In a computer system having a processor 
and a memory having computer executable instructions stored therein, a method, 
implemented through execution of the stored instructions, for accessing and 
controlling use of a watermarked software object comprising the steps of: 

reading a specific one of a plurality of identical watermarks embedded in 
the software object with different watermark keys so as to yield an actual 
watermark value, wherein the specific one watermark is defined by a predefined 
value of a watermark key previously provided to and stored within the system; and 

setting usage rights applicable to the object in response to the actual 
watermark value so as to control further use of the object by the computer system. 

Claim 80 (Original): The method in claim 79 wherein the object is either a 
passive or active object, the passive object comprising content and the active 
object comprising executable code. 

Claim 81 (Original): The method of claim 80 wherein the usage rights 
setting step comprises the step of supplying the usage rights to an operating system 
executing in the computer system in order to set a protection state applicable to the 
object. 

Claim 82 (Original): The method in claim 81, wherein the watermark key 
expires after a predefined period of time elapses, further comprising the step of 
obtaining a new watermark key for subsequent use in lieu of the expired 
watermark key, wherein the new watermark key defines a different one of the 
plurality of watermarks embedded in the object. 

Claim 83 (Original): The method in claim 81 wherein the value of the 
watermark key defines a pointer to a location in the object at which the specific 
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one watermark appears. 

Claim 84 (Original): The method in claim 83 wherein the location is a 
starting location. 

Claim 85 (Original): The method in claim 83 wherein all of the plurality 
said watermarks embedded in the object contain an identical watermark value. 

Claim 86 (Original): The method in claim 85 wherein the identical 
watermark value contains a concatenation of a product identification value 
associated with the object and an identification value associated with the object 
provider. 

Claim 87 (Original): The method in claim 81 comprising the steps of: 

reading a license for the object, the license specifying an expected value of 
a first parameter and the usage rights of the object: 

comparing the expected value of the first parameter against an actual value 
of the first parameter contained in the specific one watermark; 

if the actual and expected values for first parameter do not identically match 
each other, preventing the object from being used. 

Claim 88 (Original): The method in claim 87 comprising the steps of: 

obtaining an expected value of a second parameter communicated with the 
specific one object; 

extracting, from the specific one watermark detected in the object, the 
actual value of the first parameter and an actual value of the second parameter; 

comparing the expected values of the first and second parameters against 
the actual values of the first and second parameters, respectively; and 
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if the actual values of the first and second parameters identically and 
respectively match the expected values of the first and second parameters, 
permitting the object to bemused in accordance with the usage rights specified in 
the license. 

Claim 89 (Original): The method in claim 88 comprising the step of 
verifying that the license is signed by the object provider specified through the 
actual value of the second parameter found in the specific one watermark. 

Claim 90 (Original): The method in claim 88 wherein the first and second 
parameters comprise a product identification (PID) value and a vendor 
identification (VID) value, respectively. 

Claim 91 (Original): The method in claim 87 wherein the license comprises 
a decryption key. 

Claim 92 (Original): The method in claim 91 comprising the step of 
generating a request for the license, wherein the request specifies the object. 

Claim 93 (Original): The method in claim 92 wherein the request for the 
license further comprises a public key value associated with the computer system; 
and the license further comprises the expected value of the first parameter and the 
usage rights. 

Claim 94 (Original): The method in claim 93 wherein the license further 
comprises a signature generated through use of a public key associated with a 
provider of the object, the signature being a function of the expected watermark 
value, the usage rights. 
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Claim 95 (Original): The method in claim 94 further comprising the steps 

of: 

performing a license verifying operation by: 

verifying, using a predefined cryptographic parameter stored in the 
computer system, the public key associated with the object provider so as to 
define a certified public key of the object provider; and 

verifying, using the certified public key of the object provider, the 
signature in the license as generated by the object provider so as to define a 
verified signature; and 

performing an extraction operation by extracting, from the verified 
signature, the expected value of the first parameter, the encryption key and the 
usage rights. 

Claim 96 (Original): The method in claim 95 wherein the value of the 
watermark key defines a pointer to a location in the object at which the specific 
one watermark appears. 

Claim 97 (Original): The method in claim 96 wherein the location is a 
starting location. 

Claim 98 (Original): The method in claim 96 wherein all of the plurality of 
said watermarks embedded in the object contain an identical watermark value. 

Claim 99 (Original): The method in claim 98 wherein the identical 
watermark value contains a concatenation of a product identification value 
associated with the object, as the first parameter, and a vendor identification value 
associated with the object provider. 
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Claim 100 (Original): The method in claim 95 comprising the steps of: 
decrypting the object, as downloaded by the object provider to the computer 

system, using the decryption key specified in the license so as to yield a decrypted 

version of the object; and 

reading the value of the specific one watermark in the decrypted version of 

the object. 

Claim 101 (Original): The method in claim 100 wherein the decryption key 
is a symmetric encryption key which has been previously used, by the object 
provider, to encrypt the object in order to produce the encrypted version of the 
object. 

Claim 102 (Original): The method in claim 100, wherein the watermark 
key expires after a predefined period of time elapses, further comprising the step of 
obtaining a new watermark key for subsequent use in lieu of the expired 
watermark key, wherein the new watermark key defines a different one of the 
plurality of watermarks embedded in the object. 

Claim 103 (Original): The method in claim 81 further comprising the step 
of downloading the object, via a network connection, from a first server. 

Claim 104 (Original): The method in claim 103, wherein the watermark 
key expires after a predefined period of time elapses, further comprising the step of 
obtaining a new watermark key for subsequent use in lieu of the expired 
watermark key, wherein the new watermark key defines a different one of the 
plurality of watermarks embedded in the object. 
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Claim 105 (Original): The method in claim 103 wherein the value of the 
watermark key defines a pointer to a location in the object at which the specific 
one watermark appears. 

Claim 106 (Original): The method in claim 105 wherein the location is a 
starting location. 

Claim 107 (Original): The method in claim 105 wherein all of the plurality 
of said watermarks embedded in the object contain an identical watermark value. 

Claim 108 (Original): The method in claim 107 wherein the identical 
watermark value contains a concatenation of a product identification value 
associated with the object and a vendor identification value associated with the 
object provider. 

Claim 109 (Original): The method in claim 103 comprising the steps of: 

reading a license for the object, the license specifying an expected value of 
a first parameter and the usage rights of the object: 

comparing the expected value of the first parameter against the actual value 
of the first parameter contained in the specific one watermark; 

if the actual and expected values for first parameter do not identically match 
each other, preventing the object from being used. 

Claim 110 (Original): The method in claim 109 further comprising the 
steps of: 

obtaining an expected value of a second parameter communicated with the 
specific one object; 

extracting, from the specific one watermark detected in the object, the 
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actual value of the first parameter and an actual value of the second parameter; 

comparing the expected values of the first and second parameters against 
the actual values of the first and second parameters, respectively; and 

if the actual values of the first and second parameters identically and 
respectively match the expected values of the first and second parameters, 
permitting the object to be used in accordance with the usage rights specified in the 
license. 

Claim 111 (Original): The method in claim 110 further comprising the step 
of verifying that the license is signed by the object provider specified through the 
actual value of the second parameter found in the specific one watermark. 

Claim 112 (Original): The method in claim 110 wherein the first and 
second parameters comprise a product identification (PID) value and a vendor 
identification (VID) value, respectively. 

Claim 113 (Original): The method in claim 109 wherein the license 
comprises a decryption key. 

Claim 114 (Original): The method in claim 105 further comprising the step 
of obtaining the license from a second server and via a network connection 
existing between the computer system and the second server. 

Claim 115 (Original): The method in claim 1 14 wherein the request for the 
license further comprises a public key value associated with the computer system; 
and the license further comprises the expected value of the first parameter and the 
usage rights. 
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Claim 1 16 (Original): The method in claim 115 further comprising the step 
of generating a request, via a network connection, to the second server for the 
license, wherein the request specifies the object. 

Claim 1 17 (Original): The method in claim 116 wherein the license further 
comprises a signature generated through use of a public key associated with a 
provider of the object, the signature being a function of the expected watermark 
value, the usage rights. 

Claim 118 (Original): The method in claim 116 further comprising the 
steps of: 

performing a license verifying operation by: 

verifying, using a predefined cryptographic the public 
keyassociated with the object provider so as to define a certified 
public key of the object provider; and 

verifying, using the certified public key of the object provider, 
the signature in the license as generated by the object provider so as 
to define a verified signature; and 

performing an extraction operation by extracting, from the verified 
signature, the expected value of the first parameter, the encryption key and 
the usage rights. 

Claim 119 (Original): The method in claim 118 wherein the value of the 
watermark key defines a pointer to a location in the object at which the specific 
one watermark appears. 

Claim 120 (Original): The method in claim 119 wherein the location is a 
starting location. 
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Claim 121 (Original): The method in claim 1 19 wherein all of the plurality 
of said watermarks embedded in the object contain an identical watermark value. 

Claim 122 (Original): The method in claim 121 wherein the identical 
watermark value contains a concatenation of a product identification value 
associated with the object, as the first parameter, and a vendor identification value 
associated with the object provider. 

Claim 123 (Original): The method in claim 118 further comprising the 
steps of: 

decrypting the object, as downloaded by the object provider to the computer 
system, using the decryption key is specified in the license so as to yield a 
decrypted version of the object; and 

reading the value of the specific one watermark in the decrypted version of 
the object. 

Claim 124 (Original): The method in claim 59 wherein the decryption key a 
symmetric encryption key which has been previously used, by the object provider, 
to encrypt the object in order to produce the encrypted version of the object. 

Claim 125 (Original): The method in claim 59, wherein the watermark key 
expires after a predefined period of time elapses, further comprising the step of 
obtaining a new watermark key for subsequent use in lieu of the expired 
watermark key, wherein the new watermark key defines a different one of the 
plurality of watermarks embedded in the object. 

Claim 126 (Original): A computer readable medium having computer 
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executable instructions stored therein for performing the steps of claim 79. 



Claim 127 (Currently amended): Apparatus for a networked client-server 
environment, for accessing a software object from a first server and using the 
object so accessed, the apparatus comprising: 

a client computer connected to the network, the client computer having: 
a processor; and 

a memory having computer executable instructions stored therein; 

and 

wherein the processor, in response to the stored executable 
instructions: 

issues, in response to input information, a download request 
to the first server to download a file containing a software object; 

obtains the file containing a watermarked version of the 
software object from the first server; 

reads a specific one of a plurality of identical watermarks 
embedded in the software object with different watermark keys 
downloaded from the first server so as to yield an actual watermark 
value, wherein the specific one watermark is defined by a predefined 
value of a watermark key previously provided to and stored within 
the client computer; and 

sets usage rights applicable to the object in response to the 
actual watermark value so as to control further use of the object by 
the client computer; and 
the first server connected to the network, wherein the server: 

in response to the download request, accesses the watermarked 
version of the software object, wherein a plurality of watermarks have been 
embedded into the object, and downloading the file containing the 
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watermarked version of the software object to the client computer. 

Claim 128 (Original): The apparatus in claim 127 wherein the software 
object is either a passive or active object, the passive object comprising content 
and the active object comprising executable code. 

Claim 129 (Original): The apparatus in claim 128 wherein, the processor, 
in response to the stored instructions and as part of the usage rights setting 
operation, supplies the usage rights to an operating system executing in the client 
computer in order to set a protection state applicable to the software object. 

Claim 130 (Original): The apparatus in claim 129 wherein the value of the 
watermark key defines a pointer to a location in the software object at which the 
specific one watermark appears. 

Claim 131 (Original): The apparatus in claim 130 wherein the location is a 
starting location. 

Claim 132 (Original): The apparatus in claim 130 wherein all of the 
plurality of said watermarks embedded in the software object contain an identical 
watermark value. 

Claim 133 (Original): The apparatus in claim 130 wherein 
the processor: 

issues, in response to further input information, a request to a 
second server to obtain a license to use the software object, wherein 
the request specifies the software object; 

compares an expected value of a first parameter contained in 
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the license against an actual value of the first parameter contained in 
the specific one watermark; 

if the actual and expected values for the first parameter do not 
identically match each other, prevents the software object from being 
used by the client computer; and 
the first server, in response to the license request: 

generates a license specifying the expected value of the first 
parameter and the usage rights of the software object accorded to the 
client computer by the object provider; and 

transmits the license, via the network, the client computer. 

Claim 134 (Original): The apparatus in claim 133 wherein the processor, 
response to the stored instructions: 

obtains an expected value of a second parameter communicated with the 
specific one object; 

extracts, from the specific one watermark detected in the object, the actual 
value of the first parameter and an actual value of the second parameter; 

compares the expected values of the first and second parameters against the 
actual values of the first and second parameters, respectively; and 

if the actual values of the first and second parameters identically and 
respectively match the expected values of the first and second parameters, permits 
the object to be used in accordance with the usage rights specified in the license. 

Claim 135 (Original): The apparatus in claim 134 wherein the processor in 
response to the stored instructions, verifies that the license is signed by the object 
provider specified through the actual value of the second parameter found in the 
specific one watermark. 
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Claim 136 (Original): The apparatus in claim 134 wherein the first and 
second parameters comprise a product identification (PID) value and a vendor 
identification (VID) value, respectively. 

Claim 137 (Original): The apparatus in claim 133 wherein the license 
further comprises a decryption key. 

Claim 138 (Original): The apparatus in claim 137 wherein the request for 
the license further comprises a public key value associated with a provider of the 
object and a computer identification value both associated with the client 
computer. 

Claim 139 (Original): The apparatus in claim 138 wherein the server, in 
response to the license request: 

accesses the watermarked object specified in the request; 

encrypts the watermarked object using a predefined encryption key; and 

generates a cryptographic signature using a public key associated with the 
provider of the object, wherein the signature is a function of the expected value of 
the first parameter and the usage rights. 

Claim 140 (Original): The apparatus in claim 139 wherein the license 
request further comprises a computer identification number associated with the 
client computer, and the file downloaded to the client computer further comprises 
the public key of the server. 

Claim 141 (Original): The apparatus in claim 140 wherein the server: 
establishes, in response to the request, an entry in a database associating the 
particular copy of the software object with the encryption key; and 
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subsequently, in conjunction with issuing the license and in response to the 
computer identification value of the client computer, updates the entry to associate 
the particular copy of the software object with client computer. 

Claim 142 (Original): The apparatus in claim 141 wherein the server, prior 
to encrypting the object, provides a fingerprint value with the object, the 
fingerprint uniquely identifying a particular copy of the object to be downloaded to 
the client computer, so as to define a fingerprinted watermarked object which, in 
turn, is downloaded to the client computer as the watermarked version of the 
software object. 

Claim 143 (Original): The apparatus in claim 140 wherein the processor, in 
response to the stored instructions: 

performs a license verifying operation by: 

verifying, using a predefined cryptographic parameter stored in the 
client computer, the public key associated with the object provider so as to 
define a certified public key of the object provider; and 

verifying, using the certified public key of the object provider, the 
signature in the license as generated by the object provider so as to define a 
verified signature; and 

performs an extraction operation by extracting, from the verified signature, 
the expected value of the first parameter, the encryption key and the usage rights. 

Claim 144 (Original): The apparatus in claim 143 wherein the value of the 
watermark key defines a pointer to a location in the watermarked object at which 
the specific one watermark appears. 

Claim 145 (Original): The apparatus in claim 144 wherein the location is 
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starting location. 

Claim 146 (Original): The apparatus in claim 143 wherein all of the 
plurality of said watermarks embedded in the object contain an identical 
watermark value. 

Claim 147 (Original): The apparatus in claim 146 wherein the identical 
watermark value contains a concatenation of a product identification value 
associated with the object, as the first parameter, and a vendor identification value 
associated with the object provider. 

Claim 148 (Original): The apparatus in claim 146 wherein the processor, in 
response to the stored instructions: 

decrypts the object, as downloaded by the object provider to the client 
computer, using the decryption key specified in the license so as to yield a 
decrypted version of the object; and 

reads the value of the specific one watermark in the decrypted version of 
the object. 

Claim 149 (Original): The apparatus in claim 148 wherein the decryption 
key is a symmetric encryption key which has been previously used, by the object 
provider, to encrypt the object in order to produce the encrypted version of the 
object. 

Claim 150 (Original): The apparatus in claim 143 wherein the computer 
identification value is a processor serial number. 

Claim 151 (Original): The apparatus in claim 143 wherein the first and 



lee@hayes poc 509-324-9256 



34 



MSU 154651.} G:\MSI-1\1 191USMSI-1 19WSM0Ldoc 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 




second servers are the same. 

Claim 152 (Original): The apparatus in claim 143 wherein the watermark 
values contains a concatenation of a product identification value associated with 
the software object, as the first parameter, and a vendor identification value 
associated with the object provider. 

Claim 153 (Currently amended): In a networked client-server environment, 
a method for accessing a software object from a first server and using the object so 
accessed, the method comprising the steps of: 

in a client computer connected to the network, the client computer having a 
processor, and a memory having computer executable instructions stored therein, 
the steps, performed in response to the executable instructions, of and 

issuing, in response to input information, a download request to the 
first server to download a file containing a software object; 

obtaining the file containing a watermarked version of the software 
object from the first server; 

reading a specific one of a plurality of identical watermarks 
embedded in the software object with different watermark keys downloaded 
from the first server so as to yield an actual watermark value, wherein the 
specific one watermark is defined by a predefined value of a watermark key 
previously provided to and stored within the client computer; and 

setting usage rights applicable to the object in response to the actual 
watermark value so as to control further use of the object by the client 
computer; and 

in the first server connected to the network, the steps, in response to the 
download request of: 

accessing the watermarked version of the s6ftware object, wherein a 
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plurality of watermarks have been embedded into the object; and 

downloading the file containing the watermarked version of the 
software object to the client computer. 

Claim 154 (Original): The method in claim 153 wherein the software 
object is either a passive or active object, the passive object comprising content 
and the active object comprising executable code. 

Claim 155 (Original): The method in claim 154 wherein the usage rights 
setting step comprises the step of supplying the usage rights to an operating system 
executing in the client computer in order to set a protection state applicable the 
software object. 

Claim 156 (Original): The method in claim 155 wherein the value of the 
watermark key defines a pointer to a location in the software object at which the 
specific one watermark appears. 

Claim 157 (Original): The method in claim 156 wherein the location is a 
starting location. 

Claim 158 (Original): The method in claim 156 wherein all of the plurality 
of said watermarks embedded in the software object contain an identical 
watermark value. 

Claim 159 (Original): The method in claim 156 further comprising the 
steps of: 

in the client computer: 

issuing, in response to further input information, a request to a 
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second server to obtain a license to use the software object, wherein the 
request specifies the software object; 

comparing an expected value of a first parameter contained in the 
license against an actual value of the first parameter contained in the 
specific one watermark; and 

if the actual and expected values for first parameter do not 
identically match each other, preventing the software object from being 
used by the client computer; and 
in the first server, in response to the license request: 

generating a license specifying the expected value of the first 
parameter and the usage rights of the software object accorded to the client 
computer by the object provider; and 

transmitting the license, via the network, to the client computer. 

Claim 160 (Original): The method in claim 159 further comprising the 
steps, in the client computer, of: 

obtaining an expected value of a second parameter communicated with the 
specific one object; 

extracting, from the specific one watermark detected the object, the 
actual value of the first parameter and an actual value of the second parameter; 

comparing the expected values of the first and second parameters against 
the actual values of the first and second parameters, respectively; and 

if the actual values of the first and second parameters identically and 
respectively match the expected values of the first and second parameters, 
permitting the object to be used in accordance with the usage rights specified in the 
license. 

Claim 161 (Original): The method in claim 160 further comprising the step, 
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in the client computer, of verifying that the license is signed by the object provider 
specified through the actual value of the second parameter found the specific one 
watermark. 

Claim 162 (Original): The method in claim 160 wherein the first and 
second parameters comprise a product identification (PID) value and a vendor 
identification (VID) value, respectively. 

Claim 163 (Original): The method in claim 159 wherein the license further 
comprises a decryption key. 

Claim 164 (Original): The method in claim 163 wherein the request for the 
license further comprises a public key value associated with a provider of the 
object and a computer identification value both associated with the client 
computer. 

Claim 165 (Original): The method in claim 164 further comprising the 
steps, in the server and in response to the license request, of: 

accessing the watermarked object specified in the request; 

encrypting the watermarked object using a predefined encryption key; and 

generating a cryptographic signature using a public key associated with the 
provider of the object, wherein the signature is a function of the expected value of 
the first parameter and the usage rights. 

Claim 166 (Original): The method in claim 165 wherein the license request 
further comprises a computer identification number associated with the client 
computer, and the file downloaded to the client computer further comprises the 
public key of the server. 
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Claim 167 (Original): The method in claim 166 further comprising the 
steps, in the server, of: 

establishing, in response to the request, an entry in a database associating 
the particular copy of the software object with the encryption key; and 

subsequently, in conjunction with issuing the license and in response to the 
computer identification value of the client computer, updating the entry to 
associate the particular copy of the software object with client computer. 

Claim 168 (Original): The method in claim 167 further comprising the 
steps, in the server and, prior to encrypting the object, of providing a fingerprint 
value with the object, the fingerprint uniquely identifying a particular copy of the 
object to be downloaded to the client computer, so as to define a fingerprinted 
watermarked object which, in turn, is downloaded to the client computer as the 
watermarked version of the software object. 

Claim 169 (Original): The method in claim 166 further comprising the 
steps, in the client computer, of: 

verifying, using a predefined cryptographic parameter stored in the client 
computer, the public key associated with the object provider so as to define a 
certified public key of the object provider; and 

verifying, using the certified public key of the object provider, the signature 
in the license as generated by the object provider so as to define a verified 
signature; and 

extracting, from the verified signature, the expected value of the first 
parameter, the encryption key and the usage rights. 

Claim 170 (Original): The method in claim 169 wherein the value of the 
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watermark key defines a pointer to a location in the watermarked object at which 
the specific one watermark appears. 

Claim 171 (Original): The method in claim 170 wherein the location is a 
starting location. 

Claim 172 (Original): The method in claim 169 wherein all of the plurality 
of said watermarks embedded in the object contain an identical watermark value. 

Claim 173 (Original): The method in claim 172 wherein the identical 
watermark value contains a concatenation of a product identification value 
associated with the object, as the first parameter, and a vendor identification value 
associated with the object provider. 

Claim 174 (Original): The method in claim 172 further comprising the 
steps, in the client computer, of: 

decrypting the object, as downloaded by the object provider to the client 
computer, using the decryption key specified in the license so as to yield a 
decrypted version of the object; and 

reading the value of the specific one watermark in the decrypted version of 
the object. 

Claim 175 (Original): The method in claim 174 wherein the decryption key 
is a symmetric encryption key which has been previously used, by the object 
provider, to encrypt the object in order to produce the encrypted version of the 
object. 

Claim 176 (Currently amended): In a networked client-server environment, 
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apparatus for use in conjunction with a digital rights management system, the 
apparatus comprising: 

a client computer connected to the network, the client computer having: 
a processor; 

a memory having computer executable instructions stored therein; 

and 

an enforcer, contained within the digital rights management system, 
for controlling use of watermarked software objects, wherein the enforcer 
stores a predefined watermark key which defines a specific one of a 
plurality of identical watermarks embedded in the watermarked software 
object with different watermark keys to be used by the enforcer in 
subsequently controlling use of each one of said watermarked software 
objects, and wherein the predefined watermark key expires after a 
predefined period of time elapses since said predefined watermark key was 
initially stored in the enforcer; 

wherein the processor, in response to the stored executable 
instructions: 

establishes a network connection to a watermark key; 
issues a request to the server for a new watermark key; and 
utilizes either the predefined watermark key or the new 
watermark key, as received from the server, for the predefined 
watermark key for subsequent use in controlling access to the 
watermarked software objects until such time as the predefined key 
has expired after which the new watermark key is used instead; and 
the server, connected to the network, which, in response to the 
request: 

selects, if the predefined watermark key has not been revoked 
for the client computer, another one of predefined plurality of 
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predetermined watermark keys for use in controlling access to the 
software watermarks objects as the new watermark key; 

sends the new watermark key to the client computer; and 
if the predefined watermark key has been revoked, does not 
supply the new watermark key to the client computer. 

Claim 177 (Original): The apparatus in claim 176 wherein the network 
connection comprises a secure connection. 

Claim 178 (Original): The apparatus in claim 177 wherein the server is 
associated with a publisher of any one of the watermarked software objects or a 
vendor of said one object, or a watermarking authority. 

Claim 179 (Original): The apparatus in claim 178 wherein: 

the client computer, in response to the stored instructions and in conjunction 

with the request, also supplies the server with an existing certificate for predefined 

public key associated with the client computer; and 

the server, if the existing certificate for the public key has not been revoked 

by the server, provides the client computer with the new watermark key. 

Claim 180 (Original): In a networked client-server environment, a method 
for use in conjunction with a digital rights management system, 

in a client computer connected to a network, the client computer having: a 
processor; a memory having computer executable instructions stored therein; and 
an enforcer, contained within the digital rights management system, for controlling 
use of watermarked software objects, wherein the enforcer stores a predefined 
watermark key which defines a specific one of a plurality of identical watermarks 
embedded in the watermarked software object with different watermark keys to be 
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used by the enforcer in subsequently controlling use of each one of said 
watermarked software objects, and wherein the watermark key expires after a 
predefined period of time elapses since said key was initially stored in the 
enforcer; wherein the method comprises the steps, upon expiration of the 
watermark key, performed by the processor, in response to the stored executable 
instructions, of: 

establishing a network connection to a server; 
issuing a request to the server for a new watermark key; and 
utilizes either the predefined watermark key or the new watermark 
key, as received from the server, for the predefined watermark key for 
subsequent use in controlling access to the watermarked software objects 
until such time as the predefined watermark key has expired after which the 
new watermark key is used instead; and 

in the server, connected to the network and, in response to the request, the 
steps of: 

selecting, only if the predefined watermark key has not been revoked 
for the client computer, another one of a predefined plurality of 
predetermined watermark keys for use in controlling access to the software 
watermarks objects as the new watermark key; 

sending the new watermark key to the client computer; and 
if the predefined watermark key has been revoked, not sending the 
new watermark key to the client computer. 

Claim 181 (Original): The method in claim 180 wherein the network 
connection comprises a secure connection. 

Claim 182 (Original): The method in claim 181 wherein the server is 
associated with a publisher of any one of the watermarked software objects or a 
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vendor of said one object, or a watermarking authority. 

Claim 183 (Original): The method in claim 182 further comprising the 
steps of: 

in the client computer and in response to the stored instructions and in 
conjunction with the request: 

supplying the server with an existing certificate for a predefined 
public the client computer; and 

in the server, if the existing key associated with certificate for the public 
key has not been revoked by the server, providing the client computer with a new 
certificate, for the new watermark key. 

Claim 184 (Currently amended): In a networked client-server environment, 
apparatus for obtaining a watermark key for use in a digital rights management 
system, the apparatus comprising: 

a client computer connected to the network, the client computer having: 
a processor; 

a memory having computer executable instructions stored therein; 

and 

an enforcer, contained within the digital rights management system, 
for controlling use of watermarked software objects, wherein the enforcer is 
capable of storing a predefined watermark key which defines a specific one 
of a plurality of identical watermarks embedded in the watermarked 
software object with different watermark keys to be used by the enforcer in 
subsequently controlling use of each one of said watermarked software 
objects; 

wherein, if the enforcer does not then possess the watermark key, the 
processor, in response to the stored executable instructions: 



lee@hayes poc 509-324-9256 



44 



MSn 154651.1 G:\MS1-1\11 91 USWS1 -11 91 US.M01. doc 



1 

2 
3 
4 
5 
6 
7 
8 
9 
10 
11 
12 
13 
14 
15 
16 
17 
18 
19 
20 
21 
22 
23 
24 
25 




establishes a network connection to a server; 

issues a request to the server for a watermark key; and 

stores the watermark key, received from the server, within the 

enforcer for subsequent use in controlling access to watermarked software 

objects; and 

the server, connected to the network, which, in response to the request: 

selects, one of the a predefined plurality of predetermined watermark 

keys for use in controlling access to the software watermarked objects as 

the watermark key; 

downloads the watermark key to the client computer. 

Claim 185 (Original): The apparatus in claim 184 wherein the request 
contains a public key associated with the client computer and 
the server, in response to the request: 

encrypts the watermark key using the public key of the client 
computer so as to yield the encrypted key; and 

downloads the encrypted key to the client computer as the watermark 
key; and 

the client computer: 

upon receipt of the watermark key, decrypts the encrypted key using 
a private key associated with the client computer so as to yield a decrypted 
key; 

and stores the decrypted key as the watermark key. 

Claim 186 (Original): The apparatus in claim 185 wherein the network 
connection comprises a secure connection. 

Claim 187 (Original): The apparatus in claim 186 wherein the server is 
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associated with a publisher of any one of the watermarked software objects or a 
vendor of said one object, or a watermarking authority. 

Claim 188 (Currently amended): In a networked client-server environment, 
a method for obtaining a watermark key for use in a digital rights management 
system, 

in a client computer connected to a network, the client computer having: a 
processor; a memory having computer executable instructions stored therein; and 
an enforcer, contained within the digital rights management system, for controlling 
use of watermarked software objects, wherein the enforcer is capable of storing a 
predefined watermark key which defines a specific one of a plurality of identical 
watermarks embedded in the watermarked software object with different 
watermark keys to be used by the enforcer in subsequently controlling use of each 
one of said watermarked software objects; wherein the method comprises the 
steps, performed by the processor if the enforcer does not then possess the 
watermark key and in response to the stored executable instructions, of: 
establishing a network connection to a server; 
issuing a request to the server for a watermark key; and 
storing the watermark key, received from the server, within the 

enforcer for subsequent use in controlling access to watermarked software 

objects; and in the server, connected to the network and in response to the 

request: 

selecting, one of a predefined plurality of predetermined watermark 
keys for use in controlling access to the software watermarked objects as 
the watermark key; 

downloading the watermark key to the client computer. 

Claim 189 (Original): The method in claim 188, wherein the request 
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contains a public key associated with the client computer, comprising the steps of: 
in the server, in response to the request: 

encrypting the watermark key using the public key of the 
client computer so as to yield the encrypted key; and 

downloading the encrypted key to the client computer as the 
watermark key; and 

in the processor, in response to the stored instructions: 

upon receipt of the watermark key, decrypting the encrypted 

key using a private key associated with the client computer so as to 

yield a decrypted key; and 

storing the decrypted key as the watermark key. 



Claim 190 (Original): The method in claim 189 wherein the network 
connection comprises a secure connection. 

Claim 191 (Original): The method in claim 190 wherein the server is 
associated with a publisher of any one of the watermarked or a software objects or 
a vendor of said one object, watermarking authority. 
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